Some security fixes with directory listing

diff --git a/file.php b/file.php
index 3c4e0da045a4d259b63caeff735007d40abe2d61..3d236cb7645a1f22ff4afa6e12f2526c84f71851 100644 (file)
--- a/file.php
+++ b/file.php
@@ -24,6 +24,10 @@
     }
 
     $numargs = count($args);
+    if ($numargs < 2 or empty($args[1])) {
+        error("No valid arguments supplied");
+    }
+
     $courseid = (integer)$args[0];
 
     $course = get_record("course", "id", $courseid);